RANSOMWARE VICTIM

Sunspray Food

THEGENTLEMEN📅 April 6, 2026
8
same group

Attack Intelligence

Sunspray Food was compromised in a ransomware attack attributed to THEGENTLEMEN in April 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

sunspray.co.za zoominfo.com/c/sunspray-food-ingredients-ltd/425184083 Sunspray Solutions (Pty) Ltd, founded in 1944 and headquartered in Johannesburg, South Africa, is the country's largest independent manufacturer of spray-dried food ingredients. The company operates 10 spray dryers across two manufacturing sites (Industria, Johannesburg and Bronkhorstspruit, Gauteng), producing hundreds of products including caramel powders, fat powders, fruit & vegetable powders, creamers, egg powders, and cheese powders. In 2023, Israeli company Turpaz Industries acquired a 55% controlling stake, enabling Sunspray's geographic and portfolio expansion

Other Victims — THEGENTLEMEN (8)

Quick Facts

Attack DateApr 6, 2026
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.